Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×
Security

OpenBSD Team Cleaning Up OpenSSL 304

First time accepted submitter Iarwain Ben-adar (2393286) writes "The OpenBSD has started a cleanup of their in-tree OpenSSL library. Improvements include removing "exploit mitigation countermeasures", fixing bugs, removal of questionable entropy additions, and many more. If you support the effort of these guys who are responsible for the venerable OpenSSH library, consider a donation to the OpenBSD Foundation. Maybe someday we'll see a 'portable' version of this new OpenSSL fork. Or not."

Submission + - Does Heartbleed Disprove 'Open Source is Safer'? (datamation.com)

jammag writes: "Almost as devastating is the blow Heartbleed has dealt to the image of free and open source software (FOSS). In the self-mythology of FOSS, bugs like Heartbleed aren't supposed to happen when the source code is freely available and being worked with daily. As Eric Raymond famously said, 'given enough eyeballs, all bugs are shallow'...Tired of FOSS's continual claims of superior security, some Windows and OS X users welcome the idea that Heartbleed has punctured FOSS pretensions. But is that what has happened?"

Submission + - World's First Algae Canopy Produces the Oxygen Equivalent of 4 Woodland Hectares (inhabitat.com)

Taffykay writes: The world's first urban algae canopy controls the flow of energy, water and CO2 based on weather patterns, visitor's movements, and other environmental variables. Once completed in time for the 2015 Milan Expo, this groundbreaking bio-digital project from ecoLogic Studio will produce the oxygen equivalent of four hectares of woodland, along with nearly 330 pounds of biomass per day.

Submission + - OpenBSD Team Cleaning Up OpenSSL

Iarwain Ben-adar writes: The OpenBSD has started a cleanup of their in-tree OpenSSL library. Improvements include removing "exploit mitigation countermeasures", fixing bugs, removal of questionable entropy additions, and many more. If you support the effort of these guys who are responsible for the venerable OpenSSH library, consider a donation to the OpenBSD Foundation. Maybe someday we'll see a "portable" version of this new OpenSSL fork. Or not.
 

Submission + - The lack of US cybersecurity across the electric grid (thebulletin.org)

Lasrick writes: Meghan McGuinness of the Bipartisan Policy Center writes about the Electric Grid Cybersecurity Initiative, a collaborative effort between the center’s Energy and Homeland Security Projects. She points out that over half the attacks on US critical infrastructure sectors last year were on the energy sector. Cyber attacks could come from a variety of sources, and 'a large-scale cyber attack or combined cyber and physical attack could lead to enormous costs, potentially triggering sustained power outages over large portions of the electric grid and prolonged disruptions in communications, food and water supplies, and health care delivery.' ECGI is recommending the creation of a new, industry-supported model that would create incentives for the continual improvement and adaptation needed to respond effectively to rapidly evolving cyber threats. The vulnerability of the grid has been much discussed this last week; McGuinness's recommendations are a good place to start.

Submission + - Intuit, maker of Turbotax, lobbies against simplied tax filings (propublica.org) 1

McGruber writes: Return-free filing might allow tens of millions of Americans to file their taxes for free and in minutes. Or that, under proposals authored by several federal lawmakers, it would be voluntary, using information the government already receives from banks and employers and that taxpayers could adjust. Or that the concept has been endorsed by Presidents Obama and Reagan and is already a reality in some parts of Europe.

Sounds great, except to Intuit, maker of Turbotax: last year, Intuit spent more than $2.6 million on lobbying, some of it to lobby on four bills related to the issue, federal lobbying records show.

The Internet

Netflix Gets What It Pays For: Comcast Streaming Speeds Skyrocket 328

jfruh (300774) writes "Back in February, after a lengthy dispute, Netflix agreed to pay Comcast for network access after being dogged by complaints of slow speeds from Comcast subscribers. Two months later, it appears that Comcast has delivered on its promises, jumping up six places in Netflix's ISP speed rankings. The question of whether this is good news for anyone but Comcast is still open."

Feed Google News Sci Tech: Google tries to trademark the word 'Glass' - InsideCounsel (google.com)


ExtremeTech

Google tries to trademark the word 'Glass'
InsideCounsel
Google already has the trademark for "Google Glass," but is seeking an additional trademark for the word "Glass" by itself, in the futuristic font Google uses in its marketing campaign. According to reports, however, the U.S. Patent and Trademark Office...
Contact Lenses Containing Microcameras – Google Just Patented ThisGadget Gestures
Google Micro Camera System To Usher In Next-Gen Contact LensesUbergizmo
Google Applies For A Smart Contact Lens Patent Containing A Micro CameraAndroid Headlines - Android News

all 42 news articles

Submission + - System Administrator vs Change Advisory Board 1

thundergeek writes: I am the sole sysadmin for nearly 50 servers (win/linux) across several contracts. Now a Change Advisory Board (CAB) is wanting to manage every patch that will be installed on the OS and approve/disapprove for testing on the development network. Once tested and verified, all changes will then need to be approved for production.

Windows servers aren't always the best for informing admin exactly what is being "patched" on the OS, and the frequency of updates will make my efficiency take a nose dive. Now I'll have to track each KB, RHSA, directives and any other 3rd party updates, submit a lengthy report outlining each patch being applied, and then sit back and wait for approval.

What should I use/do to track what I will be installing? Is there already a product out there that will make my life a little less stressful on the admin side? Does anyone else have to go toe-to-toe with a CAB? How do you handle your patch approval process?
Government

Slashdot Asks: How Do You Pay Your Taxes? 386

April 15, 2014 isn't just a full moon: it's Tax Day in the U.S. That means most American adults have already submitted a tax return, or an extension request, to the IRS and -- except for a few lucky states -- to their state governments as well. I filed my (very simple) tax return online. After scanning the free options, since I live in a state -- Texas -- that does not collect personal income tax, I chose Tax Act's free services. That meant enduring a series of annoying upgrade plugs throughout the process, but I could live with that; I have no reason to think it was better or worse than TurboTax or any of the other e-Filing companies, but I liked Tax Act’s interface, and it seemed less skeevy in all those upgrade plugs than the others I glanced at. The actual process took an hour and 19 minutes once I sat down with the papers I needed. My financial life is pretty simple, though: I didn't buy or sell a house, didn't buy or sell stocks outside of a retirement account mutual fund, and didn't move from one state to another. How do you do your taxes? Do you have an argument for one or another of the online services, or any cautionary tales? Do you prefer to send in forms on paper? Do you hire an accountant? (And for readers outside the U.S., it's always interesting to hear how taxes work in other countries, too. Are there elements of the U.S. system you'd prefer, or that you're glad you don't need to deal with?)

Submission + - Netflix Gets What It Pays For: Comcast Streaming Speeds Skyrocket (itworld.com)

jfruh writes: Back in Februrary, after a lengthy dispute, Netflix agreed to pay Comcast for network access after being dogged by complaints of slow speeds from Comcast subscribers. Two months later, it appears that Comcast has delivered on its promises, jumping up six places in Netflix's ISP speed rankings. The question of whether this is good news for anyone but Comcast is still open.
Businesses

How Amazon Keeps Cutting AWS Prices: Cheapskate Culture 146

An anonymous reader writes "Amazon Web Services has cut its prices on 40-plus consecutive occasions, at times leading the charge, at other times countering similar moves by Microsoft and Google. This article at CRN includes some interesting behind-the-scenes trivia about how Amazon keeps costs down, including some interesting speculation — for example, that perhaps the reason Amazon's Glacier storage is so cheap is that maybe it might be based at least partly on tape, not disk (Amazon would not comment). The article also explains that the company will only pay for its employees to fly Economy, and that includes its senior executives. If they feel the need to upgrade to Business or First Class, they must do so from their own pocket. And instead of buying hardware from an OEM vendor, AWS sources its own components – everything from processors to disk drives to memory and network cards — and uses contract manufacturing to put together its machines."

Submission + - Snowden Used the Operating System Designed for Internet Anonymity

Hugh Pickens DOT Com writes: When Edward Snowden first emailed Glenn Greenwald, he insisted on using email encryption software called PGP for all communications. Now Klint Finley reports that Snowden also used The Amnesic Incognito Live System (Tails) to keep his communications out of the NSA’s prying eyes. Tails is a kind of computer-in-a-box using a version of the Linux operating system optimized for anonymity that you install on a DVD or USB drive, boot your computer from and you’re pretty close to anonymous on the internet. "Snowden, Greenwald and their collaborator, documentary film maker Laura Poitras, used it because, by design, Tails doesn’t store any data locally," writes Finley. "This makes it virtually immune to malicious software, and prevents someone from performing effective forensics on the computer after the fact. That protects both the journalists, and often more importantly, their sources." The developers of Tails are, appropriately, anonymous. They’re protecting their identities, in part, to help protect the code from government interference. “The NSA has been pressuring free software projects and developers in various ways,” the group says. But since we don’t know who wrote Tails, how do we now it isn’t some government plot designed to snare activists or criminals? A couple of ways, actually. One of the Snowden leaks show the NSA complaining about Tails in a Power Point Slide; if it’s bad for the NSA, it’s safe to say it’s good for privacy. And all of the Tails code is open source, so it can be inspected by anyone worried about foul play. "With Tails", say the distro developers, "we provide a tongue and a pen protected by state-of-the-art cryptography to guarantee basic human rights and allow journalists worldwide to work and communicate freely and without fear of reprisal."

Submission + - Why Pinterest Is The Google Competitor You Weren't Expecting (readwrite.com)

redletterdave writes: Pinterest isn't going to replace Google anytime soon—or ever. But with one billion 'Place Pins' on Pinterest, as the company announced Monday, the visual social network is poised to become a true search engine alternative to Google. You might be thinking, 'So what? Google has a visual search engine.' But what makes Pinterest unique is that it's not just a visual search engine; it’s a user-curated one. And with one billion Rich Pins packed with location metadata, Pinterest is pioneering a different kind of search engine for its user base, which is tailor-made for the Visual Web.

Slashdot Top Deals

"It's the best thing since professional golfers on 'ludes." -- Rick Obidiah

Working...